> Markdown version of [/jobs/ext/2918633-penetration-tester-vulnerability-researcher](https://www.wearedevelopers.com/jobs/ext/2918633-penetration-tester-vulnerability-researcher). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester - Vulnerability Researcher

- **Company:** Kingdomthales
- **Location:** Bristol, UK
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software System Penetration Testing, Cloud Computing, Linux, Web Applications, Information Technology
- **Published:** September 15, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/penetration-tester-vulnerability-researcher/47181542

## About the Role

and external stakeholders at all levelsSupport bid activities, including technical input and effort estimationWhat We're Looking For:Hands-on penetration testing experience across diverse platforms (IT and/or OT environments)CSTL (Cyber Scheme Team Leader) certification is a mustStrong understanding of security testing methodologies and frameworksExperience producing clear, actionable technical reportsDegree in Computer Science, Engineering, or equivalent experienceIndustry certifications such as CREST, OSCP, CEH, GPEN, GXPN (or similar)Desirable Experience:Background in Defence, Aerospace, Government, Nuclear, Transport, or other regulated industriesFamiliarity with compliance-driven environments and secure system accreditationWhy Thales?Work on mission-critical systems that protect national security and infrastructureOpportunities to move across domains, technologies, and international locationsClear pathways into technical leadership or people managementBe part of a globally recognised

## Description

and enabling trusted services across personal devices, connected objects, the cloud and everything in between.The Opportunity:You'll work on high-impact projects, performing penetration testing across IT and OT environments while influencing secure design and risk mitigation strategies from early project stages through to delivery.What You'll Be Doing:Conduct penetration testing across Windows, Linux, mobile (iOS/Android), web applications, and cloud environmentsIdentify, exploit, and clearly communicate security vulnerabilities and risksSupport accreditation and assurance activities on complex, high-security programmesAdvise on security controls and mitigation strategies aligned to customer needsContribute to governance frameworks, policies, and secure operating proceduresProduce high-quality technical reports and through-life security documentationAct as a cybersecurity SME across projects, staying aligned with evolving regulations and standardsCollaborate with internal teams, customers


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Is Flutter ready for the web yet? - A live coding comparison between Flutter and React](https://www.wearedevelopers.com/videos/401-is-flutter-ready-for-the-web-yet-a-live-coding-comparison-between-flutter-and-react)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)